Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: kFiciOX1WfGazgAToR0tMuNUwV3WaAE6ZHDH8fI/AsE=
Subject key identifier: 2B:34:2F:A7:4E:85:9D:10:FD:11:5A:01:EC:E8:CD:5B:3A:4B:EB:CF
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 0198D73AF662C099BA11C9DE13FE2AD872E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 149F
Signing time: Sat 23 Aug 2025 14:00:22 +0000
Manifest this update: Sat 23 Aug 2025 14:00:22 +0000
Manifest next update: Sun 24 Aug 2025 14:00:22 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: fCviZRE1AvGmGpAkrVe9mBKVpOSfkAn4WHbDol8ehn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f6:62:c0:99:ba:11:c9:de:13:fe:2a:d8:72:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Aug 23 14:00:22 2025 GMT
Not After : Aug 24 14:00:22 2025 GMT
Subject: CN=2b342fa74e859d10fd115a01ece8cd5b3a4bebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a8:c8:24:38:23:fd:21:40:68:f2:3c:13:59:
03:12:0e:9f:2e:09:ca:6e:40:c9:5f:c3:8b:ce:21:
93:29:a2:3b:a1:99:2e:88:c8:a1:8d:1b:ee:66:c1:
06:5e:59:aa:39:d2:ad:fa:51:1e:bc:24:a8:3f:c3:
a1:bf:5e:04:13:32:8a:ed:a4:a7:73:f4:3c:28:28:
df:79:c3:92:40:8c:1a:97:b3:d6:12:d1:50:b5:86:
36:74:8e:53:1d:e3:60:42:a6:f5:71:72:7a:6e:95:
b2:2d:20:b3:c2:2e:81:02:ec:1b:11:35:c2:2e:a1:
1d:03:5f:88:bd:c1:76:b2:b9:71:37:6d:c0:82:68:
a1:8e:a9:23:2c:35:19:b3:2e:d6:49:e9:af:99:93:
6b:c0:02:aa:39:22:2c:ea:87:7d:e3:75:8c:97:b1:
9f:1a:a4:c3:90:71:16:f2:3d:d6:2b:be:85:3a:e0:
f7:22:90:51:e8:b0:65:47:58:62:7d:01:79:f8:23:
a9:36:a6:3c:02:11:03:12:42:21:83:78:28:9e:b0:
43:48:e4:91:62:ad:2b:14:6e:af:9a:61:60:94:7f:
4a:cd:d0:4f:a2:27:89:c5:85:c3:9d:91:1b:50:d8:
cb:ab:5d:5b:0e:76:57:d9:ea:01:4c:4d:f3:e8:d2:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:2F:A7:4E:85:9D:10:FD:11:5A:01:EC:E8:CD:5B:3A:4B:EB:CF
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:94:ff:1c:07:fb:04:dd:f8:9f:b4:bf:2d:35:4e:ff:40:
f7:b5:ba:83:86:d0:d2:b3:31:34:cf:1f:90:b4:1c:c3:d1:a3:
c5:1d:1e:1d:f2:b3:c5:d3:29:e1:78:17:4b:75:a9:6e:73:b8:
04:06:86:41:54:a5:86:04:8f:92:88:6a:9a:08:d7:d6:f7:65:
ca:c7:2e:f1:d5:83:6b:17:5a:fc:15:e4:bb:c8:37:02:ec:af:
ff:b6:47:ec:8c:0c:e8:4a:9d:91:1c:d1:6b:28:57:29:bf:d2:
bb:ad:7f:20:88:d3:d4:4e:37:98:f4:1f:e9:fe:b1:25:19:34:
f2:bc:0d:89:18:81:69:11:de:9e:eb:75:65:e9:d6:52:45:03:
9c:b1:08:64:5e:d2:c2:1e:05:84:79:8a:b9:4d:73:7d:67:3c:
57:3b:f1:76:b0:32:a5:3a:19:5e:c1:7d:a3:71:f6:27:e0:46:
28:e9:85:37:db:f9:04:07:dc:74:cb:ce:3b:d1:7d:d0:49:17:
41:77:d7:ad:96:a5:c9:f4:64:3c:41:f0:ed:f3:20:3b:36:61:
16:88:8e:90:a5:55:e3:37:2f:a1:b9:b7:c6:9a:28:24:77:11:
f7:1a:7c:f5:8f:8b:94:89:22:18:2e:d4:92:ef:7f:70:d1:f9:
c7:d2:a5:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOvZiwJm6EcneE/4q2HLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj
YmI2NjEwHhcNMjUwODIzMTQwMDIyWhcNMjUwODI0MTQwMDIyWjAzMTEwLwYDVQQD
EygyYjM0MmZhNzRlODU5ZDEwZmQxMTVhMDFlY2U4Y2Q1YjNhNGJlYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKjIJDgj/SFAaPI8E1kDEg6fLgnK
bkDJX8OLziGTKaI7oZkuiMihjRvuZsEGXlmqOdKt+lEevCSoP8Ohv14EEzKK7aSn
c/Q8KCjfecOSQIwal7PWEtFQtYY2dI5THeNgQqb1cXJ6bpWyLSCzwi6BAuwbETXC
LqEdA1+IvcF2srlxN23AgmihjqkjLDUZsy7WSemvmZNrwAKqOSIs6od943WMl7Gf
GqTDkHEW8j3WK76FOuD3IpBR6LBlR1hifQF5+COpNqY8AhEDEkIhg3gonrBDSOSR
Yq0rFG6vmmFglH9KzdBPoieJxYXDnZEbUNjLq11bDnZX2eoBTE3z6NIgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs0L6dOhZ0Q/RFaAezozVs6S+vPMB8GA1UdIwQY
MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt
OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj
LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmeU/xwH
+wTd+J+0vy01Tv9A97W6g4bQ0rMxNM8fkLQcw9GjxR0eHfKzxdMp4XgXS3WpbnO4
BAaGQVSlhgSPkohqmgjX1vdlyscu8dWDaxda/BXku8g3Auyv/7ZH7IwM6EqdkRzR
ayhXKb/Su61/IIjT1E43mPQf6f6xJRk08rwNiRiBaRHenut1ZenWUkUDnLEIZF7S
wh4FhHmKuU1zfWc8VzvxdrAypToZXsF9o3H2J+BGKOmFN9v5BAfcdMvOO9F90EkX
QXfXrZalyfRkPEHw7fMgOzZhFoiOkKVV4zcvobm3xpooJHcR9xp89Y+LlIkiGC7U
ku9/cNH5x9KlNw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:09 2025 by rpki-client